Website Compliance Checklist

Carriers will reject one-page websites or incomplete websites. Your domain and website must show you're a real, active business.

WHAT NEEDS TO BE ON YOUR WEBSITE?

When submitting your campaign, TCR checks your website for compliance. Here’s what they look for:

1. Business Information

• Display the business name, address, and contact info clearly displayed. 
• Ensure the business name on the website matches A2P registration.
  
  

2. Website Security & Functionality

• The website must be live, functioning, and secure (padlock symbol in browser).
• The business name on the website must match exactly with the name used in your A2P registration and your EIN listing.
• The domain or website URL should reflect your business's legal name or DBA (Doing Business As) name. If your business is registered as "XYZ Electronics," your domain should ideally be something like “xyzelectronics.com,” not "bestdeals.com."
  
  

3. Legal Pages & Compliance

• Include a Privacy Policy, Terms of Service, and other required legal pages.
• Ensure compliance with data protection laws (e.g., GDPR, CCPA).
  
  

4. Consent and Opt-In Form 

• Make the Phone Number and Email Optional. Do not make them required fields. 
• Add the Privacy Policy and Terms and Conditions links in your forms and on the bottom of your home page. 
• Add the Opt-In Checkbox: Include a checkbox on your registration form, checkout page, or any other relevant page where customers sign up for communications.

Minimum Website Standards:

Active Domain with the business name in the URL (e.g. www.abcdoors.com) Domain and Website name must match, e.g. can't have domain name be abcdoors.com and Name on the website be Custom Doors

Multi-page structure: Must have 4 out of the 5 pages

☐ "Home Page" with company information and images.

☐ Must have a link at the bottom to your Terms & Conditions and Privacy Policy

☐ "About Us" page with company details, mission, and values.
☐ "Contact Us" page with a physical address, phone number, email and opt-in form

☐ "Our Team"  Team member bios (if applicable) with real names and professional                                   photos.

☐  "Services"    Explain what services you offer, Have more info about your business

☐  "FAQs"         Have a list of 3+ FAQs

☐  "Booking"   Have a calendar to book appointments

Transparent Business Model:
☐ Clear and detailed description of products/services.
☐ Transparent pricing structure.
☐ Unique value proposition outlined.

Trust Signals & Legal Compliance:
☐ Dedicated Privacy Policy and Terms of Service pages.
☐ Secure website encryption (HTTPS).
☐ Authentic customer testimonials or reviews.
☐ Logos of recognized partners, certifications, or affiliations (if applicable).

Functional & Professional Design:
☐ Well-structured, user-friendly layout.
☐ No broken links or 404 errors.
☐ No placeholder text.

Example: Such as lorem ipsum text. Be specific to the end brand, and less generic one size fits all.

☐ High-quality, professional images.
☐ Comprehensive FAQ section addressing common queries.

Social Proof & External Presence:
☐ Links to verified business social media profiles.
☐ Press mentions or blog articles (if available).
☐ Active blog or news section demonstrating business activity.

⚠️ Important Requirements for Web Form Opt-In:

1. Opt-in checkbox MUST be selectable by end-user
   
   
   
2. Opt-in checkbox MUSTinclude a disclaimer (consent message) such as:
   • "I consent to receive sms notifications, alert from COMPANY NAME HERE. Message frequency varies. Message & data rates may apply. Text HELP to (XXX) XXX-XXX for assistance. You can reply STOP to unsubscribe at any time."
     
     
     
3. Opt-in consent message and checkbox MUST be separated from Privacy Policy | Terms of Service and Promotional consent checkboxes. Promotional consent may be something like the following:
   • "By checking this box I agree to receive occasional marketing messages from INSERT COMPANY NAME HERE."
     
     
     
4. Opt-in disclaimer MUST have All CTA disclosures present to be considered compliant:
   
   
   • Program name and/or a description of the messages that will be sent (appointment reminders, marketing messages, occasional offers, etc.)
     
     
   • Organization or individual being represented in the initial message
     
     
   • Fee disclosure (“Message and data rates may apply”)
     
     
   • Service delivery frequency or recurring messages disclosure (“4 messages per month”, “Message frequency varies”, “1 message per login”, etc
     
     
   • Customer care information (typically “Text HELP for help” or Help at XXX-XXX-XXXX) - not required for single message programs (i.e 2FA)
     
     
   • Opt out instructions (typically “Text STOP to unsubscribe”) - not required for single message programs (i.e 2FA)
     
     
   • Link to Privacy Policy describing how end user opt-in information will be used. Be sure there is no mention of sharing of personal information with Third Parties (Must not be part of the checkbox statement. Instead, provide the link at the bottom of the form)
     
     
   • Link to Terms and Conditions describing terms of service (Must not be part of the checkbox statement. Instead, provide the link at the bottom of the form)
     
     
   • Incorporate a checkbox option that end-users must select in order to receive SMS messaging. The checkbox can not be pre-selected. The checkbox provides the end-user the ability to agree, or not agree, to receive SMS messaging.

Below are examples of Web form Opt-In flow.

When Phone Number field is Mandatory in Web form OPT-IN.

• Consent checkboxes should be separated for both Marketing and Non-Marketing Messages.
• Consent checkboxes cannot be pre-selected and should be optional when Phone Number is required.
• SMS notifications cannot be forced in the form. Meaning you cannot require BOTH consent and the phone number to proceed.
• Privacy Policy and TnC at footer.

Privacy Policy & Terms Placement:
☐ Must be placed separately below the consent checkbox.

Required Privacy Policy Verbiage:
☐ Privacy Policy must explicitly state that SMS data is not shared with third parties, except SMS providers.

“All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Messaging services.”